Access is role-limited and important changes are recorded in the activity log.